point when things go sideways. This isn't a maintain-and-tune role; you'll be standing up new capability and owning outcomes.

What you'll be doing

• Build a SIEM environment from the ground up (Splunk preferred, or equivalent enterprise SIEM)
• Own vulnerability management end-to-end: configure and tune scanning policies, resolve performance issues at scale, roll out authenticated scanning (Rapid7 preferred, or equivalent enterprise platform)
• Lead endpoint protection upgrades (Symantec environment)
• Contribute to network security management - Cisco ISE, firewalls (Cisco/Fortinet/Palo Alto)
• Provide security and cloud risk assessments for new solutions across AWS and Azure
• Act as the escalation point for the security analyst team
• Embed security into the SDLC and run application security reviews
• Keep security practice aligned to ACSC Essential 8 and ASD ISM
• Feed into security governance - policy, reporting, advising leadership on risk

What you'll bring

• Track record building a SIEM from scratch, not just administering one
• Enterprise-level vulnerability management experience, including authenticated scanning rollout
• Endpoint protection upgrade experience (Symantec) - nice to have
• Network security exposure - Cisco ISE, firewalls - nice to have
• Solid grounding in firewalls, proxies, IDS/IPS, malicious code detection
• Cloud security experience across AWS and Azure
• Splunk, Cisco, Sentinel, Rapid7, Tenable - bonus
• CCNA-Security or CCNP Security - bonus
• CompTIA CySA+ or CEH - bonus